AWS Shows How to Stop a Hijacked AI Agent From Reading Data the User Cannot Access